---
typeId: req
recordId: benac-cap-005
fields:
  title: Capability conflict fail-closed behavior
  statement: If capability policy is missing, conflicting, unsupported, expired,
    or ambiguous, Benac shall deny the requested capability and record the
    denial.
  rationale: Ambiguous authority should become a clear denial and diagnostic, not
    hopeful execution. This gives agents and users a repairable signal while preventing
    accidental expansion of power.
  verification: Conflicted network/storage/compute policy denies request.
  testable: true
  status: draft
  area: BENAC-CAP
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.8 Trust and capability governance
  order: 97
---
